
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa
File: 3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa (raw, json)
Hash identifier: +IUhzjX4iJxCcMgbcQWdmMHcD7sxtYcY/3hZmSmLykA=
Subject key identifier: 1F:0B:6D:15:5E:82:74:28:CE:72:59:8C:12:B7:4E:A6:8B:52:8F:E2
Certificate issuer: /CN=A5336FEFF111D5B925A8954E53C4C9C5E22AB800
Certificate serial: 77989921897707112490E7FB8EE5D3B0DE7D0CC6
Authority key identifier: A5:33:6F:EF:F1:11:D5:B9:25:A8:95:4E:53:C4:C9:C5:E2:2A:B8:00
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa
Signing time: Sun 03 May 2026 02:13:01 +0000
ROA not before: Sun 03 May 2026 02:08:01 +0000
ROA not after: Sun 02 May 2027 02:13:01 +0000
asID: 135636
IP address blocks: 103.125.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl
rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:98:99:21:89:77:07:11:24:90:e7:fb:8e:e5:d3:b0:de:7d:0c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5336FEFF111D5B925A8954E53C4C9C5E22AB800
Validity
Not Before: May 3 02:08:01 2026 GMT
Not After : May 2 02:13:01 2027 GMT
Subject: CN=1F0B6D155E827428CE72598C12B74EA68B528FE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fb:32:54:b1:88:1d:48:80:2f:f6:2c:e5:42:
b8:ce:35:11:3c:0e:fe:86:49:c1:c4:b8:b1:a3:9a:
cb:af:bc:42:00:c9:01:f9:25:10:f8:2c:d8:fc:9e:
01:78:a9:19:33:e1:26:60:e8:49:38:ba:65:f7:80:
97:40:49:a5:03:86:82:de:b0:b4:7c:8d:88:5e:42:
0f:84:b7:56:4b:12:19:82:a7:15:a7:3d:b6:08:b7:
8b:dd:ca:48:43:db:78:81:cc:0d:3d:25:60:a3:bb:
d2:99:c0:2f:81:d0:c4:d3:65:63:fd:9d:b5:b5:01:
24:74:92:7e:75:14:2c:7d:a5:8e:47:34:b6:3d:57:
5d:79:f0:99:d6:39:1f:11:80:da:85:6f:a9:57:f8:
d8:3a:28:5b:71:5d:ce:0a:1b:83:81:0a:32:4e:95:
24:c6:37:eb:ef:23:11:28:13:d5:51:91:4e:af:9d:
f0:49:08:4c:52:a3:fe:0a:dd:45:30:06:10:17:33:
5b:21:56:44:61:e4:e8:ff:3a:d0:cb:90:f6:2d:36:
73:ef:25:c0:87:ab:53:76:32:13:ec:8a:0f:36:a0:
b7:fb:d1:5a:1b:bd:1c:27:47:6f:ea:3f:84:d3:2f:
71:dc:fe:df:da:bb:a1:f6:93:c3:7b:24:51:16:9b:
f8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0B:6D:15:5E:82:74:28:CE:72:59:8C:12:B7:4E:A6:8B:52:8F:E2
X509v3 Authority Key Identifier:
keyid:A5:33:6F:EF:F1:11:D5:B9:25:A8:95:4E:53:C4:C9:C5:E2:2A:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.125.15.0/24
Signature Algorithm: sha256WithRSAEncryption
20:1d:db:1f:16:c4:7e:7a:d5:68:6d:2b:6b:6c:16:7d:25:c6:
dd:c6:85:3f:e2:36:98:41:58:59:7c:97:b4:d2:e7:be:c1:59:
17:dd:7f:10:d2:f0:53:7a:79:65:ee:41:d5:ca:b1:e2:8c:7a:
71:5c:32:24:49:17:73:97:9b:08:a3:4a:1e:e7:eb:55:76:06:
67:f1:f9:bf:5b:23:eb:8f:bc:b9:1b:c6:8a:15:e2:93:29:bc:
51:52:46:04:bb:3d:13:85:03:52:c8:60:f1:83:dc:04:05:2b:
fe:a2:3d:6c:63:cc:1e:09:5c:b0:ef:ae:01:46:56:6c:00:84:
df:9c:1e:bb:e7:84:ae:43:b0:04:7d:39:ea:85:91:85:51:f2:
e1:71:cd:58:fe:35:37:f7:9c:6d:9a:f1:28:c1:9d:d5:cb:2b:
07:c3:e9:85:a9:81:89:21:44:9c:e1:bd:ad:d1:ab:06:fa:bb:
20:8c:e0:0f:f9:3e:95:0c:a8:76:6d:85:70:12:d1:1a:71:24:
8d:26:a7:9f:54:75:0f:ba:c6:84:52:d8:58:c2:fa:d0:88:46:
79:63:4e:1b:6d:23:14:41:56:b2:a0:19:73:82:76:d5:e0:36:
a2:af:5e:10:9f:df:02:b5:3e:b4:dc:e8:19:f4:d2:a4:2b:46:
31:90:b4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:41:09 2026 by rpki-client